Hi,

This is for one octet, but is there a step-by-step checklist for one you have difference in more octets. How you can come to exactly how many entries, and what they are? I looked through the BLS videos and they helped a bit. Its more when you are presented with a list of multiple entries, how do you start?

Sincerely,
Kim Pedersen

desmond Black wrote:

Good explantion man!!

    ----- Original Message -----
    From: "Bryan Bartik"
    To: "JEREMY FURR (RIT Student)"
    Cc: [email protected]
    Subject: Re: [OSL | CCIE_RS] ACL Wildcards
    Date: Fri, 5 Jun 2009 21:50:00 -0600

    I don't know of any books but there is a video in the R&S Blended
    Learning Solution with some examples and exercises. This is how I
    do it:

    Focusing on your third octet you have

    5
    10
    13
    14

    In binary that is:

    0000 0101
    0000 1010
    0000 1101
    0000 1110

    We will not be able to use a one-line ACL with this. The only way
    a one line ACL can match only 4 networks is if the the number of
    differing bits is 2 (2^2 = 4). In this case we have 4 differing
    bits, so the least amount of networks we could match with a
    one-line ACL would be 2^4=16. But we may be able to break it into
    2 ACLs.

    5 and 13 only differ in one bit (bit 3)
    10 and 14 only differ in one bit (bit 2)

    So we can use 1 ACL line for each. Here is 5 and 10:

    0000 0101
    0000 1101
    ---------------
    0000 0101 AND = 5
    0000 1000 XOR = 8

    192.168.5.0 0.0.8.0

    Now for 10 and 14

    0000 1010
    0000 1110
    ---------------
    0000 1010 AND = 10
    0000 0100 XOR = 4

    192.168.10.0 0.0.4.0

    So you would have a 2 line ACL

    192.168.5.0 0.0.8.0
    192.168.10.0 0.0.4.0

    -hth

    On Fri, Jun 5, 2009 at 8:11 AM, JEREMY FURR (RIT Student)
    <[email protected] <mailto:[email protected]>> wrote:

        Does anyone know of a website or book that explains well how
        ACL wildcards work? I have been trying to filter out four
        blocks from a bunch of route advertisments but just can't get
        the three I want through, this is what I have R2
        is originating 192.168.2.0/24 <http://192.168.2.0/24> through
        192.168.15.0/24 <http://192.168.15.0/24> in RIP to R1. I want
        to only accept blocks 192.168.5.0, 192.168.10.0, 192.168.13.0
        and 192.168.14.0
If I use acl with 192.168.10.0 0.0.4.0, I will get 10 and 14
        but not thirteen. For the 5 network I just use the 192.168.5.0
0.0.0.255. Any thoughts or help would be appreciated. Jeremy Furr

        [email protected] <mailto:[email protected]>




-- Bryan Bartik
    CCIE #23707 (R&S), CCNP
    Sr. Support Engineer - IPexpert, Inc.
    URL: http://www.IPexpert.com



Desmond Black,
In Pursuit of CCIE!!
India
--
Be Yourself @ mail.com!
Choose From 200+ Email Addresses
Get a *Free* Account at www.mail.com <http://www.mail.com/Product.aspx>!

--

// Freedom Matters
// Follow my progress on: http://kpjungle.wordpress.com

Reply via email to